This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft File: nVXDPIsCBMRAwPl46lhSCAHixcc.mft (raw, json) Hash identifier: 760b0d+96uBryw0wwmiX3QLeIDnKOtH8MPZWwCJ7ajI= Subject key identifier: B3:16:C5:82:6B:9C:FB:37:02:20:9F:E0:F8:B3:F6:83:90:D9:2F:DD Authority key identifier: 9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7 Certificate issuer: /CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7 Certificate serial: 019AF352A6FA6ADAB99A9137827716D4E5F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft Manifest number: 07 Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: nVXDPIsCBMRAwPl46lhSCAHixcc.crl (hash: Yctq86DR5nan5Afto/DJ0VZZKxXaBdiixKGanokLK+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a6:fa:6a:da:b9:9a:91:37:82:77:16:d4:e5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7 Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=b316c5826b9cfb3702209fe0f8b3f68390d92fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:5d:e4:e3:7c:2e:eb:80:b1:c5:df:f9:15: 00:6c:f9:d4:d1:25:d9:22:a7:c1:c5:ee:d3:8d:1e: 68:c0:fa:ff:47:cf:4d:f3:a8:21:a0:ff:71:4f:8d: ae:b1:49:52:76:7f:a2:3d:de:4d:43:61:b1:b8:6e: d9:c4:13:fe:fc:cc:fe:1d:c2:a1:6f:4d:95:7d:d5: e3:bf:a3:65:4b:d7:61:ec:45:54:16:f2:8d:39:eb: ea:c0:92:7d:9a:be:de:0f:26:31:ce:9a:d3:bb:1e: fa:b6:f1:73:e9:9d:f0:48:9c:b2:de:44:a0:17:69: 7b:e9:5c:68:d9:78:85:d8:32:17:76:59:9f:01:e9: 37:26:6b:ea:c6:f0:28:b8:8d:cb:50:26:e9:0b:e3: 78:e8:2a:29:4e:9b:4f:18:47:1f:cf:82:7c:77:53: 33:9a:ba:8f:14:cd:3e:e7:46:30:45:59:a6:85:95: 53:5e:ef:cb:0f:4a:01:1f:89:35:3f:a3:e5:7f:91: 09:ee:2a:ba:f7:8c:99:3d:d0:71:cb:cf:d6:6a:34: 87:21:12:a2:b1:d2:f1:7f:ed:fb:d3:d6:37:a3:f1: 52:0b:68:0d:41:4d:c9:c8:cc:7c:87:03:1c:6f:c2: 14:85:79:22:68:71:b7:d2:2c:59:5a:1b:e0:74:fc: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:16:C5:82:6B:9C:FB:37:02:20:9F:E0:F8:B3:F6:83:90:D9:2F:DD X509v3 Authority Key Identifier: keyid:9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:77:51:09:ee:26:4f:7a:ce:fa:4d:c3:e2:60:89:8b:9f:c1: e3:69:50:9e:78:90:6f:3a:30:dc:67:61:38:d4:57:c7:82:64: 39:aa:ec:bd:4e:7a:e5:dd:bd:ac:d3:9a:9b:b9:f5:91:62:c6: 2a:f1:43:66:58:85:9d:4c:c0:41:25:b9:1a:39:dd:f8:d4:81: 12:be:55:7a:8c:17:e3:3b:a5:82:41:18:ef:31:63:aa:8b:44: ce:be:bb:73:27:90:4d:05:82:c2:04:49:02:88:fc:fe:e7:26: 68:00:30:5e:a8:45:f1:e7:a4:78:72:3b:8f:ca:cc:53:71:11: 6f:b2:2c:cb:25:69:6a:2e:91:a3:4e:3b:fc:a7:81:40:bc:c6: 91:a3:e5:06:e5:df:8b:4c:15:c9:88:06:25:6a:b3:22:11:4f: 84:2b:29:ee:5c:b9:ae:e0:3b:1d:73:33:af:40:49:1a:0d:39: 37:80:6f:c8:fd:7b:85:af:44:e4:5b:f4:6c:ef:df:78:04:91: e3:8d:7a:ea:df:9a:0b:a8:59:c0:8c:53:29:18:cd:66:95:57: b7:db:4c:fa:18:6f:15:f1:c8:f9:33:72:15:97:97:9f:e9:b7: a6:43:4b:47:8f:3b:b8:b7:9b:fe:56:24:f3:46:77:f1:7b:ec: b4:0f:62:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqb6atq5mpE3gncW1OX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTVjMzNjOGIwMjA0YzQ0MGMwZjk3OGVhNTg1MjA4MDFl MmM1YzcwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD EyhiMzE2YzU4MjZiOWNmYjM3MDIyMDlmZTBmOGIzZjY4MzkwZDkyZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWBd5ON8LuuAscXf+RUAbPnU0SXZ IqfBxe7TjR5owPr/R89N86ghoP9xT42usUlSdn+iPd5NQ2GxuG7ZxBP+/Mz+HcKh b02VfdXjv6NlS9dh7EVUFvKNOevqwJJ9mr7eDyYxzprTux76tvFz6Z3wSJyy3kSg F2l76Vxo2XiF2DIXdlmfAek3JmvqxvAouI3LUCbpC+N46CopTptPGEcfz4J8d1Mz mrqPFM0+50YwRVmmhZVTXu/LD0oBH4k1P6Plf5EJ7iq694yZPdBxy8/WajSHIRKi sdLxf+3709Y3o/FSC2gNQU3JyMx8hwMcb8IUhXkiaHG30ixZWhvgdPxaVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMWxYJrnPs3AiCf4Piz9oOQ2S/dMB8GA1UdIwQY MBaAFJ1VwzyLAgTEQMD5eOpYUggB4sXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEt YzNhYjg3NzM4ZmU3LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEtYzNhYjg3NzM4ZmU3 LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhndRCe4m T3rO+k3D4mCJi5/B42lQnniQbzow3GdhONRXx4JkOarsvU565d29rNOam7n1kWLG KvFDZliFnUzAQSW5Gjnd+NSBEr5VeowX4zulgkEY7zFjqotEzr67cyeQTQWCwgRJ Aoj8/ucmaAAwXqhF8eekeHI7j8rMU3ERb7IsyyVpai6Ro047/KeBQLzGkaPlBuXf i0wVyYgGJWqzIhFPhCsp7ly5ruA7HXMzr0BJGg05N4BvyP17ha9E5Fv0bO/feASR 44166t+aC6hZwIxTKRjNZpVXt9tM+hhvFfHI+TNyFZeXn+m3pkNLR487uLeb/lYk 80Z38XvstA9iEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:45 2025 by rpki-client